Auto-Update: 2024-01-20T03:00:25.488368+00:00

fkie-cad · Jan 20, 2024 · 992036c · 992036c
1 parent b2e7619
commit 992036c
Show file tree

Hide file tree

Showing 24 changed files with 1,117 additions and 49 deletions.
diff --git a/CVE-2021/CVE-2021-313xx/CVE-2021-31314.json b/CVE-2021/CVE-2021-313xx/CVE-2021-31314.json
@@ -0,0 +1,20 @@
+{
+  "id": "CVE-2021-31314",
+  "sourceIdentifier": "[email protected]",
+  "published": "2024-01-20T01:15:07.770",
+  "lastModified": "2024-01-20T02:58:09.603",
+  "vulnStatus": "Awaiting Analysis",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the server."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://github.com/huahaiYa/jinshansoft/blob/main/Kingsoft%20Security%20Arbitrary%20File%20Upload%20%2B%20File%20Contains%20Vulnerabilities.md",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-470xx/CVE-2023-47024.json b/CVE-2023/CVE-2023-470xx/CVE-2023-47024.json
@@ -0,0 +1,24 @@
+{
+  "id": "CVE-2023-47024",
+  "sourceIdentifier": "[email protected]",
+  "published": "2024-01-20T02:15:07.600",
+  "lastModified": "2024-01-20T02:58:09.603",
+  "vulnStatus": "Awaiting Analysis",
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Cross Site Request Forgery vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker to obtain sensitive information and escalate privileges via a crafted script to the UserSelfService component."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://docs.google.com/document/d/18EOsFghBsAme0b3Obur8Oc6h5xV9zUCNKyQLw5ERs9Q/edit?usp=sharing",
+      "source": "[email protected]"
+    },
+    {
+      "url": "https://github.com/Patrick0x41/Security-Advisories/tree/main/CVE-2023-47024",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-517xx/CVE-2023-51729.json b/CVE-2023/CVE-2023-517xx/CVE-2023-51729.json
@@ -2,8 +2,8 @@
   "id": "CVE-2023-51729",
   "sourceIdentifier": "[email protected]",
   "published": "2024-01-17T07:15:52.113",
-  "lastModified": "2024-01-17T14:01:37.163",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-01-20T02:45:53.173",
+  "vulnStatus": "Analyzed",
   "descriptions": [
     {
       "lang": "en",
@@ -16,6 +16,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
+      },
       {
         "source": "[email protected]",
         "type": "Secondary",
@@ -39,6 +59,16 @@
     ]
   },
   "weaknesses": [
+    {
+      "source": "[email protected]",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
+    },
     {
       "source": "[email protected]",
       "type": "Secondary",
@@ -50,10 +80,42 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:skyworthdigital:cm5100_firmware:4.1.1.24:*:*:*:*:*:*:*",
+              "matchCriteriaId": "3EF6B1EE-BD96-454A-BDDC-A84377358F13"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:skyworthdigital:cm5100:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "F250D98F-03F0-4F0D-A3B3-83295D026881"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0013",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }
diff --git a/CVE-2023/CVE-2023-517xx/CVE-2023-51730.json b/CVE-2023/CVE-2023-517xx/CVE-2023-51730.json
@@ -2,8 +2,8 @@
   "id": "CVE-2023-51730",
   "sourceIdentifier": "[email protected]",
   "published": "2024-01-17T07:15:52.710",
-  "lastModified": "2024-01-17T14:01:37.163",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-01-20T02:46:01.520",
+  "vulnStatus": "Analyzed",
   "descriptions": [
     {
       "lang": "en",
@@ -16,6 +16,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
+      },
       {
         "source": "[email protected]",
         "type": "Secondary",
@@ -39,6 +59,16 @@
     ]
   },
   "weaknesses": [
+    {
+      "source": "[email protected]",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
+    },
     {
       "source": "[email protected]",
       "type": "Secondary",
@@ -50,10 +80,42 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:skyworthdigital:cm5100_firmware:4.1.1.24:*:*:*:*:*:*:*",
+              "matchCriteriaId": "3EF6B1EE-BD96-454A-BDDC-A84377358F13"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:skyworthdigital:cm5100:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "F250D98F-03F0-4F0D-A3B3-83295D026881"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0013",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }
diff --git a/CVE-2023/CVE-2023-517xx/CVE-2023-51731.json b/CVE-2023/CVE-2023-517xx/CVE-2023-51731.json
@@ -2,8 +2,8 @@
   "id": "CVE-2023-51731",
   "sourceIdentifier": "[email protected]",
   "published": "2024-01-17T07:15:53.290",
-  "lastModified": "2024-01-17T14:01:37.163",
-  "vulnStatus": "Awaiting Analysis",
+  "lastModified": "2024-01-20T02:46:14.247",
+  "vulnStatus": "Analyzed",
   "descriptions": [
     {
       "lang": "en",
@@ -16,6 +16,26 @@
   ],
   "metrics": {
     "cvssMetricV31": [
+      {
+        "source": "[email protected]",
+        "type": "Primary",
+        "cvssData": {
+          "version": "3.1",
+          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+          "attackVector": "NETWORK",
+          "attackComplexity": "LOW",
+          "privilegesRequired": "LOW",
+          "userInteraction": "REQUIRED",
+          "scope": "CHANGED",
+          "confidentialityImpact": "LOW",
+          "integrityImpact": "LOW",
+          "availabilityImpact": "NONE",
+          "baseScore": 5.4,
+          "baseSeverity": "MEDIUM"
+        },
+        "exploitabilityScore": 2.3,
+        "impactScore": 2.7
+      },
       {
         "source": "[email protected]",
         "type": "Secondary",
@@ -39,6 +59,16 @@
     ]
   },
   "weaknesses": [
+    {
+      "source": "[email protected]",
+      "type": "Primary",
+      "description": [
+        {
+          "lang": "en",
+          "value": "CWE-79"
+        }
+      ]
+    },
     {
       "source": "[email protected]",
       "type": "Secondary",
@@ -50,10 +80,42 @@
       ]
     }
   ],
+  "configurations": [
+    {
+      "operator": "AND",
+      "nodes": [
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": true,
+              "criteria": "cpe:2.3:o:skyworthdigital:cm5100_firmware:4.1.1.24:*:*:*:*:*:*:*",
+              "matchCriteriaId": "3EF6B1EE-BD96-454A-BDDC-A84377358F13"
+            }
+          ]
+        },
+        {
+          "operator": "OR",
+          "negate": false,
+          "cpeMatch": [
+            {
+              "vulnerable": false,
+              "criteria": "cpe:2.3:h:skyworthdigital:cm5100:-:*:*:*:*:*:*:*",
+              "matchCriteriaId": "F250D98F-03F0-4F0D-A3B3-83295D026881"
+            }
+          ]
+        }
+      ]
+    }
+  ],
   "references": [
     {
       "url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0013",
-      "source": "[email protected]"
+      "source": "[email protected]",
+      "tags": [
+        "Third Party Advisory"
+      ]
     }
   ]
 }